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(54) CONTENTS INFORMATION TRANSMITTING METHOD AND DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To reduce the cost of a reproducer and to 
obtain a ciphering system capable of being used commonly between media 
by performing decodings of plural kinds of information recording media 
including ciphered contents infonnation and plural kinds of information 
recording media including decoding key information with a single method. 
SOLUTION: A title key TK and a disk key DK to be determined by a 
copywright holder and a copyright manager are ciphered to EKa, EKb (TK, 
TO) with master keys Ka, Kb by a key manager and also they are chiphered 
to EKp, EKq (TK, DK) by master keys Kp, Kq for disk production. A disk 
manufacture chiphers contents information in two steps by the TK, TO 
decoded in a black box to record them on a disk. Besides, the manufacture 
records the EKa, EKb (TK, TO), Ka, Kb ciphered by a maker's ID key and 
the player work key set ciphered by a user's ID key on the disk. 
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♦NOTICES* 



Japan Patent Office is not responsible for any 
Jiamages caused by the use of this translation. 

1 . This document has been translated by computer. So the translation may not reflect the original precisely 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] " " ' " " 

[Claim 1] The contents communication-of-infonnation method characterized by performing the informational decryption by 
which encryption was earned out [ aforementioned ] by the single method in the contents communication-of-information 
method including the decryption key information including the enciphered contents information which decrypts two or more 
the information record media and the contents information by which encryption was carried out [ aforementioned 1 on a seed 
one or more of transmitting two or more information record media of a seed to a user one or more. 

[Claim 2] The information record medium of two or more sorts of one not lesses which contain two or more decryption keys 
farther enciphered by other encryption keys in the decryption key including the enciphered contents information which 
decrypts the information record medium of a seed, and the contents information by which encryption was carried out 
aforementioned ] one or more, And the contents communication-of-infonnation method characterized by performing the 
informational decryption by which encryption was carried out [ aforementioned ] by the single method in the contents 
conmiunicauon-of-informauon method containing the user ID key which decrypts the decryption key by which encryption was 
carried out [ aforementioned ] of transmitting two or more information record media of a seed one or more. 
[Claim 3] The contents communication-of-information method according to claim 1 or 2 characterized by for at least one of the 
aforementioned encryption being enciphered by two stages by two kinds of keys, and at least one of the aforementioned 
decryptions being decrypted by two stages by two kinds of keys. 

[Claim 4] The contents communication-of-information method according to claim 1 or 2 characterized by for at least one of the 
aforementioned encryption being enciphered by two stages by two kinds of keys using chaos cryptography, and the 
aforementioned decryption being decrypted by two stages by two kinds of keys. 

[Claim 5] The contents information transfer system characterized by performing [ two or more ] the informational decryption 
by which encryption was carried out [ aforementioned ] with a specific means in the contents information transfer system 
including the decryption key information including the enciphered contents information which decrypts an information record 
means of communication and the contents information by which encryption was carried out [ aforementioned ] on a seed 
equipped with two or more information record means of communication of a seed one or more one or more. 
[Claim 6] The information record means of communication of two or more sorts of one not lesses including the enciphered 
contents information, The information record means of communication of two or more sorts of one not lesses containing the 
decryption key further enciphered by other encryption keys in the decryption key which decrypts the contents information by 
which encryption was carried out [ aforementioned ], And it sets to two or more sorts containing the user ED key which 
decrypts the decryption key by which encryption was carried out [ aforementioned ] of contents information transfer systems 
equipped with two or more information record means of communication of a seed one or more. The contents information 
transfer system characterized by performing the informational decryption by which encryption was carried out 
aforementioned ] with a specific means. 

[Claim 7] The contents information transfer system according to claim 5 or 6 characterized by having a means by which at least 
one of the aforementioned encryption is enciphered by two stages by two kinds of keys, and a means by which at least one of 
the aforementioned decryptions is decrypted by two stages by two kinds of keys. 

[Claim 8] The contents information transfer system according to claim 5 or 6 characterized by having a means by which at least 
one of the aforementioned encryption is enciphered by two stages by two kinds of keys using chaos cryptography, and a means 
by which the aforementioned decryption is decrypted by two stages by two kinds of keys. 

[Translation done.] 
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* NOTICES * 

Japan Patent Office is not responsible for any 
•damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original precisely 

2. **** shows the word which can not be translated. y ' 
3. In the drawings, any words are not translated. 

DETAILED DESCRIPTION *~~ ~ " 



Detailed Description of the invention] ^^r^ — -__ 

0001] 

The technical field to which invention belongs] this invention relates to encryption of the key which enciphers the contents 
information and contents information in an information transmission contents 
[0002] 

[Description of the Prior Art] Radio broadcasting and communication media, such as wire communication media, such as 
package media, such as a disk and a tape, and a network, ground broadcast, satellite broadcasting, and communication are used 
as a means of communication m telhng contents information etc. conventionally. As for the contorts mforrnation sent usbe 
S^ m ^ ,a - P^.f ci yPhon processing (scramble processing) is performed according to each medium^ g 
[0003] For example, it is unreproducible as long as there will be no key which decrypts data even if it reads the recorded data 
or comes rfthe contents information recorded on the disk is data wiu/which image^onnauon^s lSSSlSfS£Sm 
tS&fffF* "if ^ gal ?° py ° f a d,sk nor a ^Pyright Person means by such encryption is prevented operanon 
[0004] Although code release processing is usually performed in many cases using exclusive use LSI, it is also possible to 
carry out by software by the general purpose computer. However, even though it takes which method, it is requked to prevent 
from analyzing using a debugger, an assembling tool, etc. The software equipped with the "resistance" which prevents such 
internal analysis is called tamper resist software (Tamper Resistant Software) prevents sucn 

[0005] The outline of an example of the contents information encryption in a disk is shown in drawing 1 Contents 
information is enciphered combming the master key which the key manager in a neutral positi on holds, a nd the title key which 

w key and 111086 [ "Wngbt 1 wn °m a copyright person etc. sets manage hierarchical X 
[0006] A master key is a different encryption key for every LSI for code release, or decryption software maker. A key manager 
manages these master keys collectively. Copyright managers, such as a movie company and a concert company manage fdfsk 
key, and a copyright manager manages a title key instead of a copyright person or a copyright person. One disk key mly be set 
as one disk and the multi-statement of the title key may be carried out according to eviry title and a copyright persW A disk 

tiSSSSlX maS,CT y deCTyPtiaS ^ eXdUSiVe 1156 LSl ^ dal ^" aJg0rithm ' * C " 4 the 

[0007] When enciphering a disk key, the disk key set which can also decrypt the master key with which it differed for every 

tfv S^SEE?" ,! ^ S 0n !?. e u d,sk ^ e tiUe key ^P hered b y the <"sk key enciphered with the enciphered master 
key and the disk key is recorded on a disk with the contents information enciphered by the title key. Since anv key is 
enciphered, a title key required for a decryption of contents information cannot be known. 
(UUUoJ 

[Problem(s) to be Solved by the Invention] When a disk and a code key are sent for contents information by communication 
encryption is made m many cases by the respectively original method, and two or more kinds of decryption processings must 
be prepared. For this reason, since a regenerative apparatus is equipped with two or more sorts of decryption meanses 
stfety^Scoo? ^ 8 ° eS UP MoreoVer ' tf equipment is simplified, a problem will come out in respect of the 

[0009] As shown in drawing 1 , in the cipher system of the conventional disk, it is a title key about contents information is a 
disk key about a MleKey and ,s the senaj-pattem of enciphering a disk key with a master key, respectively. Since it can decode 
by withm a tune [ hnuted ] when a hmrt has especially the length of a key if the unjust decode person of a code attacks by the 
method of total key search only to a tide key, safe intensity is completely insufficient. For example, if a code key becomes 40 
I 'J! m( *l • IS deci P ner able within several hours, copyright cannot be protected effectively. Moreover, since a master key will 
system m 3 P * ' S ' 11 ^ Searched by me decode P™ 011 md k ve, y dangerous with the conventional cipher 
[0010] The cipher system used by the disk system has information, such as three encryption key data, and these decryption 
algorithms, algonthms of path authentication. In order to protect such confidential information from reverse engineering it is 
necessary to cope with software, a debugger, snapshot analysis, a setup of a break point, etc 

[001 1] Moreover, since encryption which is different when transmission media differed will be carried out, the regenerative 
apparatus set by it is required for the contents information enciphered by the peculiar method according to a 
transmission-medium system. For example, since it is enciphered by the method by which the contents information acquired 
through the network differed from the contents information acquired from the disk, communalization of a regenerative 
apparatus is checked. 

[0012] Furthermore, the cipher system which is hard to decode even when using which transmission medium is demanded 
Generally, as for the encryption processing in the case of the disk widely distributed as a transmission medium, what has very 
high safety is required. On the other hand, for reproduction of an animation, the processing speed more than fixed is required 
in a decryption, this invention aims at obtaining the new contents transfer method and new equipment which realize the low 
regenerative apparatus of cost, and advanced safety and advanced processing speed obtaining the encryption system (there 
being interoperability) which can be early used in common between media. 
[0013] 
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[Means for Solving the Problem] In order t solve the ab ve-mentioned technical problem, in the contents 
communications-information method including the decryption key information including the enciphered contents 
information which decrypts tw or more the information record media and the contents information by which encryption was 
tamed out [ aforementi ned ] on a seed one or more of transmitting the information record medium of a seed to a user the 
informational decryption by which encryption was carried out [ aforementioned ] performs two or more this inventions by the 
specific meth d one or more. The information record medium of two r more sorts of one not lesses which contain two or 
more decryption keys further enciphered by other encryption keys in the decryption key including the enciphered contents 
information which decrypts the information record medium of a seed, and the contents information by which encryption was 
carried out [ aforementioned ] one or more, And in the contents communication-of-information method containing the user key 
which decrypts the decryption key by which encryption was carried out [ aforementioned ] of transmitting two or more 
information record media of a seed one or more, the informational decryption by which encryption was carried out 
aforementioned ] carries out by the single method. Furthermore, in order to raise the safety of a code, when the encryption 
processing speed from which at least one of the aforementioned encryption is enciphered by two stages by two kinds of keys 
and at least one of the aforementioned decryptions is decrypted by two stages by two kinds of keys is taken into consideration 
it is performed that at least one of the aforementioned encryption uses chaos cryptography. 

[0014] More, the example of a disk is given and this invention is explained to a detail In the contents information transfer 
system using a master key, a title key, a disk key, a player work key, and a user key, it solves by the method of not storing a 
master key for the above-mentioned technical problem in a player directly by the method of double encryption Moreover a 
problem is solved by using the new key transfer method and a more nearly high-speed cipher system. [001 5] explained 
according to a view below Drawing 2 is explanatory drawing of the system of this invention, the master keys Kp and Kq for 
disk manufacture (henceforth a semi- master key) defined according to the disk manufacturer while the title key (TK) and disk 
key (DK) which a copyright person and a copyright manager define were enciphered by the key manager as EKa and Kb (TK 
DK) with master keys Ka and Kb - EKp and Kq (TK, DK) - ** » it is enciphered 

[0016] By the black box supplied by the key manager, a disk manufacturer decrypts the enciphered key data, and EKp and Kq 
(TK, DK), gets a title key and a disk key, enciphers contents information in two stages by these two keys, and records on a 
disk. 

[0017] It combines and the title key for a decryption enciphered with the master keys Ka and Kb supplied by the key manager 
a disk key, and EKa and Kb (TK,DK) are also recorded on a disk. * 
[0018] Moreover, EUID (PWKl-nset) which enciphered, the key, i.e., the maker ID key, for specifying the maker who 
manufactures the electronic circuitries (LSI etc.),/, or software which decrypts the master keys Ka and Kb for decrypting a title 
key and a disk key, and enciphered the key group (PWKl-nset), i.e., a player work key set, which collected parts for twS or 
more above-mentioned maker by the user ID key (UIDO) is doubled, and it records on a disk 

[0019] As mentioned above, when the described method generally distributes contents information only by the disk to many 
and unspecified persons, it is suitable. 

[0020] A network is used as auxiliary means, and when offering the information for decrypting the enciphered contents 
information which is recorded on the disk only to a specific user in a network, it carries out as follows. 
[0021] The above-mentioned master keys Ka and Kb are enciphered by the maker ID key. Enciphered by the user ID key 
(UIDO) of fixation, key groups (PWK 1 -nset), i.e., a player work key set, collected [ two or more ]. The player work key set 
which did not record EUID (PWKl-nset) on the disk, but was instead enciphered by the peculiar user ID key (UIDj), Efficient 
employment, such as common-use-izing of the contents information enciphered while only a specific user can decrypt contents 
inf rmation now and being able to aim at improvement in security by distributing EUIDj (PWK 1 -nset) to a user through a 
network, can be aimed at ^ 

[0022] Although the above-mentioned disk is effective similarly even if it replaces it by broadcast or the network medium it 
also becomes possible to transmit simultaneously the player work key set enciphered by the ID key (UIDj) for every user since 
there was no limitation in capacity unlike a disk, and EUIDj (PWK 1 -nset) in the case of a network. Moreover, it is also possible 
to replace by radio including broadcast instead of the above-mentioned network. 

[0023] The means of the reproduction in this invention system is shown in drawing 3 . After EUED0 (PWKl-nset) which 
enciphered by the user ID key (UIDO) of fixation, the key group (PWKl-nset), i.e., the player work key set, which enciphered 
by the maker ED key and collected two or more master keys Ka and Kb reproduced from the disk, is decrypted by the system 
key currently beforehand recorded on the player, the decode of the master keys Ka and Kb is carried out by the maker ID key 
embedded to LSI etc. J 
[0024] Moreover, with the master key by which the decryption was carried out [ above-mentioned ], the decode of the title key 
enciphered with the master key similarly reproduced from the disk, a disk key, and EKa and Kb (TK, DK) is carried out and 
they can obtain a disk key and a title key. In this way, by the taken-out disk key and the title key, two stages of contents 
information doubled in encryption processing are decrypted, and contents information, such as an image and music, is 
reproduced. 

[0025] Moreover, from a network terminal, the player work key set and EUIDj (PWKl-n) which were enciphered by the ID 
key (UIDj) for every user through the network to the specific user are transmitted to a player with a user ID key (UIDj) 
peculiar to a network terminal, and are used for a player instead of the user ID key of fixation. In this case, although it is not 
reproduced since EUID0 (PWKl-nset) enciphered by the user ID key of fixation is not recorded on a disk, the player work key 
set and EUIDj (PWKl-nset) which were enciphered by the ID key (UIDj) for every user transmitted from the network terminal 
are supplied, and contents are reproduced in the same procedure as the above below. 

[0026] The key manager system in the system of this invention is shown in drawing 4 . The key manager who received the title 
key hands a disk manufacturer the key data EKa and Kb (TK, DK) for a decryption with which it was enciphered for recording 

n the key data EKp and Kq (TK, DK) and the disk which were enciphered by two stages with two kinds of master keys for 
another black boxes for disk makers (semi- master key) from the disk key from a copyright manager, and a copyright person. 
[0027] Moreover, the player work key set EUID0 (PWK 1 -nset) enciphered by the user ID key is passed to a disk 
manufacturer, or a player work key set (PWK 1 -nset) is passed to a network contractor. 

[0028] By this invention, the code and decryption of the title key and disk key which are passed to a disk manufacturer are 
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done by two kinds of keys as mentioned ab ve at tw stages. Furthermore, the code and decryption of contents information are 
done by the title key and the disk key at two stages. Since cipher processing is performed doubly in this way, the system of this 
invention requires what has a speed quick as a cipher system. Moreover, it is also required that graphical data can be treated 
There is chaos cryptography as one of the code methods which satisfies such a demand. 
[0029] 

[Embodiments of the Invention] A disk key and a title key are enciphered as Kp from a copyright person and a copyright 
manager by the keys Ka and Kb for a decryption, and are enciphered by the key control mechanism as EKp and Kq (TK DK) 
by the key for EKa and Kb (TK, DK) disk manufacturers, and Kq, respectively. 

[0030] By the black box supplied from a disk management mechanism, a disk manufacturer decrypts the enciphered key data, 
and EKp and Kq (TK, DK), gets the title key TK and the disk key DK, enciphers contents information in two stages by thes 
two keys, and writes in a disk. About a disk key and a title key, the enciphered key data for a decryption which were passed 
from the key control mechanism, and EKa and Kb (TK, DK) are written in a disk. In addition, the disk key set information 
EUID0 including the key Ka for a decryption, and Kb information which were enciphered (PWKl-nset) 
It is written in a ** disk. 

[003 1] Reproduction of the disk in the system of this invention is shown in drawing 3 . Enciphered disk kev set information 

EUID0 (PWKl-nset) which was read from the disk — 7 

The decode of a shell and the keys Ka and Kb for a decryption is carried out, they decrypt the enciphered key data, and EKa 
and Kb (TK, DK) in two stages using this key, and take out a title key and a disk key. 

[0032] In this way, the taken-out contents data by which encryption processing was doubly carried out using the title key and 
the disk key are decrypted in two stages, and data, such as an image and an audio, are reproduced. 

[0033] The key managerial system in the system of this invention is shown in drawing 4 . The key data enciphered by two 
stages with the master key for the black boxes according to [ two kinds of] disk maker, EKp and Kq (TK, DK) and the key 
data for a decryption, and EKa and Kb (TK, DK) cross the control mechanism which received the title key to a disk 
manufacturer from the disk key from a copyright manager, and a copyright person. 

[0034] It is enciphered using the ID key classified by LSI maker, and the key Ka for a decryption, the enciphered disk key set 
information including Kb information, and EUID0 (PWKl-nset) are crossed to a disk manufacturer. 
[0035] there is a chaos cipher system as one of a part of this invention or the cipher systems which can all come out of and 
which can be used The procedure of the method of a chaos code is shown in drawing 5 below. The procedure of chaos 
cryptography used by the system of this invention is shown in drawing 3 . The plaintext (information on a dimension) which 
consists of a key with which the user was specified, and a digital signal is transmitted to a chaos code system, and an 
encryption signal sentence is obtained inside this system by adding at a stream the chaos signal generated by the key to a 
plaintext per character. If the same key and an encryption signal sentence are transmitted to a chaos code system when 
decoding, a plaintext can be obtained by the same principle. 

[0036] Chaos (Chaos) It is Greek meaning **** and is the phenomenon which looks irregularly and ********** \fc e the 
turbulent flow of the flow of air. Unlike a random phenomenon, it can be called the complexity under an easy rule. It has the 
property of "it depends to initial value sensitively", "**********» ) » not stopping a moment, either", etc. Drawing 6 is a graph 

which shows the time series wave of the chaos function called logistic map. 

[0037] The principle of chaos cryptography is explained. It is [ plaintext / used as input data / sentence / signal / P (i) and ] Chv 
about K (j) and a chaos signal in C (i) and a key. It is referred to as (i). 

[0038] What processes P() and C() per byte, the character string (for example, a-z, 0-9) which the length becomes from an 
ASCII code about K() as n bytes, and its length are set to m. That is, it considers as 0<i<=n and 0<j<=m. The encryption 
procedure of this invention is shown in drawing 7 , and decryption procedure is shown in drawing 8 . 

[0039] About digital chaos signal generation function Chv(), it is possible to change with various kinds of chaos fiinctions. For 
example, the chaos function called logistic map can be defined as follows. 

Chl(n, p) beginXn+l=p*Xn(1.0-Xn) return (Xn+1) end [0040] Moreover, if it is a chaos function in a repeat formula, a 
definition can be given as follows. 

Ch2(n and p) beginXn+l= Xn2-preturn end (/(Xn+1+2.0) 4.0) [0041] By the key processing module, as shown in following 
f(), it puts on a register by using as the code key K the character string of the arbitrary length by whom the user was inputted, 
and the number v of the chaos function which it is going to use out of two or more chaos functions to prepare is decided using 
this K, and the initial value init of the chaos function, delay delay of a chaos signal, and the parameter p of a chaos function 
(plurality is also possible) are decided simultaneously. 
[0042] 

It is the positive integer of f(K) beginjob >D. = (double) (K)/Linit =job-(long int) delay (job) = (job (long int)) mod Bp 
=delay/L-(Iong int) (delay/L) v = (int) (delay/L) For a certain irrational number (for example, values, such as L=pi, are also 
used) and D, mod Dend, however L are the number of the chaos function to prepare, and B. 

[0043] The system using multi-key multiplex chaos can be constituted by using in series the algorithm mentioned above, as 
shown in basic parts, the n drawing 9 . By the system of this invention, it becomes a safer system by using this technique. To 
drawing 10 The sample ot tne plaintext by which decode was carried out to the sample of a plaintext and drawing 1 1 at the 
sample of the cipher by chaos cryptography and drawing 1 2 is shown. 

[0044] If a key is not known by the decryption technique used now, it is impossible to decode a chaos code. Moreover, like this 
invention, if the system using multi-key multiplex chaos is adopted, it will become safety more. Since a chaos function can 
furthermore be replaced, the rule of encryption processing can be updated at any time. Furthermore, since it is a variable length 
key, the space (combination number) of a key increases more. 

[0045] That is, it is the same. In the case of a fixed-length key, it is in the key of n figure m ******. : In the case of mn 
variable-length key: [0046] 
[Equation 1] 
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n-1 

i -1 



[0047] There is ************. Since generating of a chaos signal carries out in stream quickly in a signal unit which is 
referred to as that encryption of a signal and processing of decode add a chaos signal to every [ instead of a block unit / of a 
signal / a byte ] since it is stream-processing, it can transmit and receive continuously. According to chaos cryptography it can 
respond also to a high-speed optical-transmission method. J ' 
[0048] Since it is a digital formula, and it will end if only an encryption key is used, and the reference signal of the chaos signal 
by the side of a decoder is not needed, and it is not influenced by the noise in an information transmission but the merits and 
dements of a key can be freed, a user can balance the facilities and safety easily. 

[0049] In a chaos cipher system, the merits and demerits of the plaintext made into the object of security are free and since it 
can respond also to what [kinds, such as a text, a binary, and a graphic, of plaintexts, also in the system using graphical data, it 
can mainly be used satisfactory. &&* f 

[0050] 

[Effect of the Invention] Since according to this invention various meanses of communication of information such as a disk a 
network, and a broadcast medium, are united and distribution of efficient contents information can be aimed at there is an ' 
effect of the cost concerning distribution being mitigated and also being able to mitigate the burden to a user's regenerative 
apparatus by adoption of the unified contents information scrambling system. 

[005 1] Moreover, according to the system of this invention, since encryption processing of a disk key and the title key is 
earned out doubly the parenchyma top of decode becomes impossible. Moreover, since cipher processing also of the contents 
is earned out doubly , safety is increasing further. Especially, it is high speed and the burden to hardware becomes small by use 
of the high chaos cryptography of safety. In addition, safety increases further by taking in the processing doubly enciphered 
also to the managenal system of a key. v 



[Translation done.] 
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DESCRIPTION OF DRAWINGS 



[Drawing? 
[Drawing 3 



[Drawing 4 
[Drawing :> 



[Brief Description of the Drawings] 

(Drawing 1] It is outline explanatory drawing of the contents information encryption in a disk. 

It is outline explanatory drawing of creation of the disk in the system of this invention. 
It is outline explanatory drawing about reproduction of the disk in the system of this invention. 
It is outline explanatory drawing of the key managerial system in the system of this invention. 
It is the conceptual diagram of a chaos cipher system. 
It is the time series wave of logistic map chaos. 

It is the flow diagram of the encryption procedure of chaos cryptography. 
It is the flow diagram of the decryption procedure of chaos cryptography. 
_ J It is the conceptual diagram of the multi-key multiplex chaos encryption system of chaos cryptography 
[ljrawing |Q| It is the sample of a plaintext. e v J * 

[Drawing M | It is the sample of the cipher by chaos cryptography. 
[Drawing IZJ It is the sample of the plaintext by which decode was carried out. 



| Drawing b 
[Drawing 7 



[Drawing!? 
[Drawing V 
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